He didn't understood from where it came, but it's certainly a thing like that, because I saw he didn't hesitate to download and install this kind of things.
Its possible that this got happend to him with some kind of stealer like the Racoon.
There are some many diffrent version of it and also so many other stealer software.
Trojan and Malware today also include some thing linke that.
Because it happens to me ages ago thats why i fight about the guys that posting it and spread that kind of things.
So that Users and newbies dont get in trouble or lose there money and thigns like i has done once.